# Enterprise Integration Tool Boundaries

Companion to **How AI Agents Should Communicate With Shopify, ERP, CRM and Warehouse Systems**.

**Tool-based integration beats unrestricted system access.** There is **no** native Shopify AgentCore connector — Gateway talks OpenAPI / MCP / Lambda **you** own.

```text
AI Agent
  → Approved Tools
     ├── Storefront (Shopify / other)
     ├── ERP
     ├── CRM
     ├── WMS
     └── Analytics
```

## Per-system rules

| System | Typical tools | Writes | Validation |
| ------ | ------------- | ------ | ---------- |
| Storefront | `getOrder`, `getProduct`, `getInventory` | Admin writes HITL | Idempotency; rate limits |
| ERP | `getCost`, `draftPO` | PO send HITL | Vendor match |
| CRM | `getAccount`, `getTier` | PII writes HITL | JWT audience |
| WMS | `getShipment`, `getReceipt` | Adjust qty HITL | Location scope |
| Analytics | Aggregates | None | No raw PII |

## Cross-cutting

- Permissions: Identity JWT → Cedar
- Error handling: timeout / 429 → retry policy in **code**, not “try another tool”
- Audit: CloudTrail on `bedrock-agentcore.amazonaws.com` + Gateway traces
- Browser **off** unless the turn is explicitly a browse skill

## Related

- Security: [`ecommerce-agent-security-checklist.md`](ecommerce-agent-security-checklist.md)
- CTO brief: [`architecture-cto-brief.md`](architecture-cto-brief.md)
- Data tools: [`ai-data-agent-tool-catalog.md`](ai-data-agent-tool-catalog.md)